Trách nhiệm chính

• Coordinate the annual Technology Risk and Control Self-Assessment (RCSA) process in PRISM, including control planning, stakeholder engagement, evidence collection, assessment coordination, and completion tracking.
• Review control descriptions and supporting evidence to assess control design and operating effectiveness, identify gaps or inconsistencies, and recommend remediation or escalation where required.
• Support technology incident risk coordination by facilitating root‑cause analysis, aligning incident owners and action owners, validating supporting evidence, and tracking corrective and preventive actions.
• Manage technology risk issues and remediation actions by maintaining accurate trackers, monitoring deadlines, following up with responsible stakeholders, validating closure evidence, and escalating overdue or high‑risk items.
• Coordinate second‑line risk reviews by managing information requests, preparing and validating evidence, supporting walkthroughs, and ensuring timely completion of review activities.
• Track second‑line findings and remediation commitments through to formal acceptance, maintaining complete and audit‑ready documentation.
• Prepare risk and control dashboards, management reports, ageing and overdue analysis, and thematic insights to highlight recurring control weaknesses and emerging risks.
• Collaborate with Technology teams, control owners, Information Security, Compliance, Internal Audit, and second‑line risk to support effective risk governance while maintaining appropriate independence and confidentiality.

Yêu cầu

• Bachelor’s degree in Information Technology, Risk Management, or a related discipline.
• At least 5 years of relevant experience in technology risk, operational risk, internal controls, RCSA, audit, compliance, or risk issue management.
• Practical understanding of risk and control principles, control design and operating effectiveness, incident management, root‑cause analysis, and remediation governance.
• Strong analytical, evidence‑review, prioritization, and problem‑solving skills, with the ability to manage a high volume of controls and remediation actions across competing deadlines.
• Excellent stakeholder management and follow‑up skills, with the ability to challenge constructively, drive action owners toward resolution, and communicate risks clearly to technical and non‑technical stakeholders.
• Advanced working knowledge of Microsoft Excel and presentation tools, with experience developing trackers, management reports, dashboards, and ageing or overdue analysis.

Yêu cầu ưu tiên

• Experience with GRC platforms such as PRISM, ServiceNow GRC, or equivalent systems is strongly preferred.
• Familiarity with technology risk and control frameworks such as COBIT, ITIL, ISO 27001, or COSO is preferred.
• Relevant certifications such as CISA, CRISC, CIA, or equivalent are an advantage.

Mức lương

• Competitive salary and 13th‑month salary.

Phúc lợi

• 14+ annual leaves per year.
• Premium healthcare insurance, starting from your probation period.
• Project reviews and yearly performance appraisals.
• Annual company trips.
• Teambuilding activities: Team lunch/dinner, events, celebrations, sports clubs (football, yoga, badminton, etc.).
• International team with flexible working time.
• Tailor‑made career path.
• Technical workshops and training courses.
• Mobility: Opportunities to be on‑site abroad in our offices in over 60+ countries.

Thông tin khác

• Equal Opportunity: Amaris Consulting welcomes applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.